IP to ASN Database
The full IP-to-ASN mapping as daily-updated MMDB and CSV files for local, zero-latency resolution at any volume.
View IP to ASN DatabaseThe ASN Lookup API returns the complete network profile behind any AS number or IP address: the owning organization, its type, website, and country of registration, announced IPv4 and IPv6 route prefixes, peers, upstreams, downstreams, and the raw WHOIS record. One call answers who runs a network, what they announce, and who they connect to. Free trial available.
One request with include=peers,downstreams, upstreams,routes,whois_response returns everything this page describes. The response below is a real, current output for AS12 (New York University).
Full API Docscurl "https://api.ipgeolocation.io/v3/asn?apiKey=<API_KEY>&asn=12&include=peers,downstreams,upstreams,routes,whois_response"1{
2 "asn": {
3 "as_number": "AS12",
4 "organization": "New York University",
5 "country": "US",
6 "type": "EDUCATION",
7 "domain": "nyu.edu",
8 "date_allocated": "1984-07-05",
9 "asn_name": "NYU-DOMAIN",
10 "allocation_status": "",
11 "num_of_ipv4_routes": 12,
12 "num_of_ipv6_routes": 1,
13 "rir": "ARIN",
14
15 "routes": [
16 "192.76.177.0/24",
17 "216.165.96.0/20",
18 "2607:f600::/32",
19 "... 10 more routes"
20 ],
21
22 "downstreams": [
23 {
24 "as_number": "AS394666",
25 "description": "NYU Langone Health",
26 "country": "US"
27 }
28 ],
29
30 "upstreams": [
31 {
32 "as_number": "AS3269",
33 "description": "Telecom Italia S.p.A.",
34 "country": "IT"
35 },
36 {
37 "as_number": "AS8220",
38 "description": "COLT Technology Services Group Limited",
39 "country": "GB"
40 },
41 {
42 "as_number": "AS286",
43 "description": "GTT Communications Inc.",
44 "country": "US"
45 },
46 "... 5 more upstreams"
47 ],
48
49 "peers": [
50 {
51 "as_number": "AS3269",
52 "description": "Telecom Italia S.p.A.",
53 "country": "IT"
54 },
55 {
56 "as_number": "AS8220",
57 "description": "COLT Technology Services Group Limited",
58 "country": "GB"
59 },
60 {
61 "as_number": "AS394666",
62 "description": "NYU Langone Health",
63 "country": "US"
64 },
65 "... 8 more peers"
66 ],
67
68 "whois_response": "#
69# ARIN WHOIS data and services
70are subject to the Terms of Use
71# available at:
72
73https://www.arin.net/resources/registry/whois/tou/
74..."
75 }
76}Every ASN lookup returns the full identity of a network: who owns it, what type it is, where it is registered, what it announces, and who it connects to.
1{
2 "asn": {
3 "as_number": "AS1",
4 "organization": "Level 3 Parent, LLC",
5 "country": "US",
6 "...":"..."
7 "upstreams": [
8 {
9 "as_number": "AS7046",
10 "description": "Verizon Business",
11 "country": "US"
12 },
13 {
14 "as_number": "AS51925",
15 "description": "NUVEI BULGARIA EOOD",
16 "country": "BG"
17 },
18 "...":"..."
19 ]
20 }
21}Downstream organizations are the networks or customers that receive internet access from a given ASN. Obtain the list of downstream ASNs of a primary ASN to understand the network's customer base and how it distributes its internet access. This information is useful for understanding the influence and reach of a network. It is also helpful in security operations, where tracking a suspicious IP through its downstream path can assist in identifying the origin of a threat.
Full API Docs1{
2 "asn": {
3 "as_number": "AS1",
4 "organization": "Level 3 Parent, LLC",
5 "country": "US",
6 "...":"..."
7 "downstreams": [
8 {
9 "as_number": "AS25139",
10 "description": "TVCABO - Comunicacoes Multimedia, Lda",
11 "country": "MZ"
12 }
13 ]
14 }
15}The information returned by ASN Lookup API includes extensive details of the IPv4 and IPv6 routes controlled by a given Autonomous System. These routes represent the IP prefixes announced by the ASN to the global internet routing table. A large number of routes shows that network infrastructure is complex and has regional or global influence. Network engineers, CDNs and cyber security experts use this information for different purposes such as route filtering, threat intelligence correlation, and traffic engineering.
Full API Docs1{
2 "asn": {
3 "as_number": "AS1",
4 "organization": "Level 3 Parent, LLC",
5 "country": "US",
6 ...
7 "routes": [
8 "63.215.98.24/29",
9 "8.45.82.48/29",
10 "8.13.224.128/27",
11 ...
12 ]
13 }
14}One of the core features provided by the IP and ASN information API is the listing of network peers. Peers are AS organizations that connect directly to exchange traffic without intermediaries. Peering details of any network give insight into its connectivity strength and efficiency. This information is crucial for network operators, content delivery networks (CDNs), and cybersecurity teams. Analyzing the peering relationships of specific AS organizations helps determine the quality of routing paths and optimize latency-sensitive services. A network that peers with multiple global ISPs generally offers fast and reliable access across different regions.
Full API Docs1{
2 "asn": {
3 "as_number": "AS1",
4 "organization": "Level 3 Parent, LLC",
5 "country": "US",
6 "...":"..."
7 "peers": [
8 {
9 "as_number": "AS25139",
10 "description": "TVCABO - Comunicacoes Multimedia, Lda",
11 "country": "MZ"
12 },
13 {
14 "as_number": "AS7046",
15 "description": "Verizon Business",
16 "country": "US"
17 },
18 "...":"..."
19 ]
20 }
21}The WHOIS response in the ASN API provides essential registration details about the Autonomous System, including the AS number, name, allocation status, registration and update dates, and the organization responsible for managing the network. This data is useful for network administrators and security teams when communicating with network operators regarding issues. It is available in the WHOIS response field of the API.
Full API Docs1{
2 "asn": {
3 "as_number": "AS1",
4 "organization": "Level 3 Parent, LLC",
5 "country": "US",
6 "type": "BUSINESS",
7 "domain": "level3.com",
8 "date_allocated": "2001-09-20",
9 "asn_name": "LVLT-1",
10 "...":"..."
11 "whois_response": "\n\n\nASNumber: 1\nASName: LVLT-1\nASHandle: AS1\nRegDate: 2001-09-20\nUpdated: 2024-06-18 ..."
12 }
13}Pass ip= and the API resolves any IPv4 or IPv6 address to its origin AS, then returns the same full profile. Pass asn= and it works the other way: the AS number expands into its announced IPv4 and IPv6 ranges. Both directions cost one credit.
Six groups of data in every full lookup. Each card summarizes one; the docs carry the field-by-field reference for all of them.
The AS number, owning organization, ASN type (ISP, hosting, business, education, or government), website, country of registration, RIR, allocation date, and current allocation status. Enough to answer 'who runs this network' from a single object.
Every IPv4 and IPv6 prefix the AS announces to the global routing table, plus per-family route counts. Use it for allowlists, blocklists, route filtering, and footprint analysis.
The networks this AS exchanges traffic with directly, each with its AS number, name, and country. Peering breadth is the fastest read on how well-connected a network is.
The customer networks that receive connectivity through this AS. Downstream chains let security teams trace where a suspicious network actually gets its transit.
The transit providers this AS relies on to reach the rest of the internet. Upstream lists reveal dependency: one upstream is a single point of failure, five is resilience.
The raw registry text for the ASN: registrant organization, handles, registration and update dates, and points of contact. No second WHOIS query needed.
Full field reference in the ASN API Docs
The ASN dataset is rebuilt every day from two source families: global BGP routing feeds, which show what every AS actually announces and who it connects through, and the five regional internet registries which hold the registration record
Routing table snapshots and live update streams from BGP vantage points worldwide, alongside delegation files and WHOIS records from all five RIRs.
Deduplicate announcements across vantage points, drop bogon and reserved space, filter route leaks and flap noise, and expire prefixes that leave the routing table.
Map every announced IPv4 and IPv6 prefix to its origin AS, producing the per-ASN route lists and counts the API returns.
Analyze observed AS paths to classify each adjacency as customer, provider, or peer. That classification is what the API serves as upstreams, downstreams, and peers.
Registry records merge into the routing view and organization names are normalized. Each ASN then carries its type and registration details.
The rebuilt dataset ships daily to the ASN API and the downloadable databases, and the build date renders in the stat band above.
The API itself runs on global edge infrastructure with a 99.99% uptime SLA; current latency is public on the status page
Request DemoASN data comes in four packages: free lookup tools, lite databases, geolocation APIs with an ASN field, and dedicated ASN APIs. They answer different questions, and most stop well before the relationship data.
| What to check | Free lookup tools | Lite ASN databases | Geolocation APIs with an ASN field | IPGeolocation ASN API |
|---|---|---|---|---|
| Lookup directions | IP or ASN, in a browser, rate-capped | IP ranges to ASN only | IP only | IP and ASN, by API |
| Core record | AS number, name, organization | 2 to 5 fields per row | AS number and organization | Organization, type, website, country, RIR, allocation date, status |
| Route prefixes | Rare | Not per ASN | Typically absent | IPv4 and IPv6, with counts |
| Peers, upstreams, downstreams | Not returned | Not included | Not included | All three, in one response |
| WHOIS record | Separate tool | Not included | Not included | Raw registry text in the response |
| Update cadence | Rarely stated | Monthly is common | Varies by plan | Daily, build date shown |
If the question is "who is this network and who moves its traffic," only the last column answers it.
Resolving addresses at scale? The IP to ASN Database ships the same mapping as a daily-updated MMDB or CSV for local, zero-latency lookups. For an IP's location, currency, timezone alongside basic ASN data, use the IP Geolocation API.
The full IP-to-ASN mapping as daily-updated MMDB and CSV files for local, zero-latency resolution at any volume.
View IP to ASN DatabaseRegistration and ownership records for every allocated ASN, built for compliance research and bulk attribution work.
View ASN WHOIS DatabaseLocation, currency, timezone, company, and basic ASN data for any IP in one combined response.
View IP Geolocation APIExplore every Geo Advance database in one place, including geolocation, ASN, company, and WHOIS data, then pick individual datasets or build a custom mix. Compare bundles that pair Geo Advance with Geo Standard or Security Pro. Includes sample data, schemas, update cadence, and field lists for every database in the tier.
View Geo Advance TierASN data helps security teams identify the source of malicious network activity with greater precision. By continuously monitoring ASN-related patterns, security professionals can detect anomalies more quickly and mitigate emerging threats before they escalate. Leveraging this intelligence allows them to make smarter, data-driven decisions, and proactively defend their infrastructure.
Network engineers can analyze ASN data to optimize routing paths and reduce latency. An understanding of peering relationships between ASNs helps them identify the optimal path for data packets, ensuring efficient data delivery and an improved user experience. Additionally, by utilizing peering information, ISPs can bypass transit providers and reduce operational costs.
By understanding where internet connections are coming from (geolocation) and which network they belong to (ASN information), businesses can get a much clearer and more accurate picture of where their customers are, which internet companies or organizations they use, and how people in different areas are using their services. This deeper understanding helps them build more effective marketing strategies, make customer interactions feel more personal, and focus on reaching the right people to get the best results.
Financial institutions and e-commerce platforms can use ASN finder tools to identify suspicious transactions and activities originating from high-risk ASNs. By pinpointing these potential threats early, organizations can make smarter decisions, such as implementing additional verification steps, monitoring high-risk traffic more closely, and proactively preventing fraudulent activities. This not only strengthens security measures but also builds greater trust with customers by safeguarding their financial and personal information.
By observing ASN peering relationships, upstream providers, and downstream organizations, ISPs can strategically plan which ASes they should connect to in order to make optimal decisions for their network infrastructure. Through careful analysis of traffic patterns, capacity demands, and geographic distribution, ISPs can design a more efficient, resilient, and cost-effective network. This proactive approach improves overall network performance, reduces latency, and minimizes dependency on costly transit providers, ensuring better service quality for end users.
Basic ASN data is free. Every free-plan IP Geolocation API response includes the AS number , organization, and country for an IP, with 1,000 credits per day . The dedicated ASN API , which adds routes, peers, upstreams, downstreams, and WHOIS data, is available on paid plans starting from $19/month , and a free trial can be activated through support.
Yes. Pass ip= with any IPv4 or IPv6 address and the API resolves it to the origin AS before returning the complete ASN profile, including routes and relationships when requested. Passing asn= queries a network directly. If both are provided, asn= takes priority. If neither is supplied, the API resolves the caller's IP address.
The ASN dataset is updated daily . It is rebuilt every day using BGP routing feeds and data from the five Regional Internet Registries (RIRs), ensuring new allocations, route changes, and relationship updates are reflected in the next build. The same update schedule also applies to the IP to ASN Database.
Yes. The ASN API fully supports IPv6. IP-to-ASN lookups accept IPv6 addresses, and every ASN profile includes announced IPv6 prefixes and IPv6 route counts alongside IPv4 information. IPv6 lookups do not incur additional charges and are available on the same plans as IPv4.
Every lookup returns the core ASN record, including the AS number , owning organization, type, website, registration country, RIR, allocation date, status, and route counts. Using the include parameter adds announced IPv4 and IPv6 prefixes, peers, upstreams, downstreams, and the raw WHOIS record. The ASN API documentation lists every response field with its type and empty-state behavior.
They describe the three relationship types around an autonomous system. Peers exchange traffic directly, typically settlement-free. Upstreams are transit providers the network relies on to reach the wider internet. Downstreams are customer networks that depend on it for internet connectivity. Together they provide a complete picture of a network's connectivity and dependencies.
Every successful ASN lookup costs 1 credit , regardless of how many include options are requested. Paid plans start at $19/month with 150,000 credits , and there are no rate limits. Every response includes the X-Credits-Charged header for transparent billing. See the Credits Usage Guide for complete details.
Yes. The IP to ASN Database provides daily updated IP-range-to-ASN mappings with organization, network type, route counts, and peer counts in MMDB and CSV formats. The ASN WHOIS Database contains ASN registration and ownership records, making both databases ideal for batch enrichment, air-gapped deployments, and low-latency local lookups.
Enrich every request with precise geolocation and real-time threat intelligence, delivered on a global edge with a 99.99% uptime SLA. Start free and scale when you’re ready.
Get the latest in geolocation tech, straight to your inbox.